https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:45:01 +0000 https://vulnerability.circl.lu/vuln/cve-2021-28544 <p><strong>Affected:</strong> Apache Software Foundation Apache Subversion</p> <p>Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal &#39;copyfrom&#39; paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the &#39;copyfrom&#39; path of the original. This also reveals the fact that the node was copied. Only the &#39;copyfrom&#39; path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Subversion</p> <p>Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal &#39;copyfrom&#39; paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the &#39;copyfrom&#39; path of the original. This also reveals the fact that the node was copied. Only the &#39;copyfrom&#39; path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.</p> https://vulnerability.circl.lu/vuln/cve-2021-28544 https://vulnerability.circl.lu/vuln/usn-5372-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: subversion</p> <p>Evgeny Kotkov discovered that Subversion servers did not properly follow path-based authorization rules in certain cases. An attacker could potentially use this issue to retrieve information about private paths. (CVE-2021-28544)</p> <p>Thomas Weißschuh discovered that Subversion servers did not properly handle memory in certain configurations. A remote attacker could potentially use this issue to cause a denial of service or other unspecified impact. (CVE-2022-24070)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: subversion</p> <p>Evgeny Kotkov discovered that Subversion servers did not properly follow path-based authorization rules in certain cases. An attacker could potentially use this issue to retrieve information about private paths. (CVE-2021-28544)</p> <p>Thomas Weißschuh discovered that Subversion servers did not properly handle memory in certain configurations. A remote attacker could potentially use this issue to cause a denial of service or other unspecified impact. (CVE-2022-24070)</p> https://vulnerability.circl.lu/vuln/usn-5372-1